Privacy Notice

1. Who we are

This Privacy Notice applies to the website, donation activity and family-support enquiries operated by [LEGAL ORGANISATION NAME], trading or campaigning under the working name One Day For Them (“we”, “us” or “our”).

Legal name

[LEGAL ORGANISATION NAME]

Registration

[CHARITY / COMPANY / CIC NUMBER, IF APPLICABLE]

Registered address

8 Bell Yard, London, WC2A 2JR

Privacy contact

info@palestianlondon.com

We are the data controller for personal information we decide how to use. Where a payment provider, email platform, donor-management system or local delivery partner processes information on our instructions, it may act as a data processor or a separate controller. The final live version of this notice must identify those organisations where required.

2. What this notice covers

This notice covers information collected through this website, a connected donation provider, email or telephone contact, a family-support referral, fundraising events and updates you ask us to send. It does not replace the privacy notice of a third-party payment provider or another organisation that independently decides how to process your information.

3. Information we may collect

We will collect only information that is reasonably necessary for a clear purpose. Depending on how the final campaign is operated, this may include:

• Donation and contact details: name, email address, postal address, telephone number, donation amount, date, currency and communication preferences.
• Payment and Gift Aid information: payment confirmation, transaction reference, billing information held by the payment provider and any valid Gift Aid declaration. We should not store full card numbers or security codes.
• Family-support information: a name, relationship, area and details about a family’s needs where a person has permission to share them. This can include sensitive information about health, disability, vulnerability, religion, ethnicity, location or children. We will ask for the minimum information needed and protect it more carefully.
• Communications: messages, questions, complaints, consent records and correspondence with us.
• Technical information: IP address, device and browser information, pages visited, security logs and cookie choices. Analytics or advertising cookies will not be used unless the final configuration and consent process permit them.

4. How we use information

We may use information to:

• process, acknowledge and reconcile a donation;
• issue a receipt or administer Gift Aid where the organisation is eligible and properly registered;
• respond to questions, complaints, refund requests or suspected fraud;
• check a named-family referral against a verified support list and coordinate appropriate support;
• protect children, families, donors, volunteers and partners from harm or misuse;
• organise delivery, monitoring, auditing and impact reporting without publicly identifying families;
• send updates or fundraising messages where we have a lawful basis and, where required, your consent;
• keep accounting, safeguarding, legal and regulatory records; and
• secure, maintain and improve the website.

5. Lawful bases

For people in the UK or EEA, the organisation must identify a lawful basis for each purpose. Depending on the final activity, this may include consent, taking steps at your request, compliance with a legal obligation, or our legitimate interests in running a safe, accountable humanitarian campaign. We will not rely on legitimate interests where those interests are overridden by your rights.

Information about health, disability, ethnicity, religion, children or vulnerability may be special-category or otherwise sensitive personal data. We will collect it only when necessary, tell people why, apply an appropriate legal condition, restrict access and use safeguarding controls. Do not place sensitive details in a public comment, social-media message or unencrypted email.

6. Family-support referrals

A family name is not a guarantee that support will be delivered. It is a request for careful checking. We will:

• ask the referrer to confirm they have permission to share the information where appropriate;
• use the information only for checking, safeguarding, coordination and reporting;
• limit access to trained people who need the information;
• avoid publishing names, addresses, photographs or identifying stories without a separate, informed consent process; and
• delete or anonymise the information according to the organisation’s retention schedule.

We may be unable to match a referral because records are incomplete, access is restricted, the person cannot be safely contacted or the request is outside the campaign’s capacity. We will not sell family information or use it to pressure people into donating.

7. Who we may share information with

We may share limited information with:

• payment providers and banks to process or reconcile a donation;
• accounting, audit, legal, insurance, fraud-prevention and technology providers;
• vetted local delivery partners, only where necessary to assess or provide support;
• public authorities, regulators or law-enforcement bodies where the law requires it or where sharing is necessary to protect someone from serious harm; and
• professional safeguarding or humanitarian partners where a lawful and necessary referral is made.

We will not sell personal information. If information is transferred outside the UK or EEA, the organisation must identify the destination, the legal transfer mechanism and any additional safeguards in the final notice.

8. How long we keep information

We will keep information only for as long as necessary for the purpose it was collected, legal and accounting requirements, safeguarding, fraud prevention and the handling of disputes. The final organisation must publish or maintain a retention schedule. Different records may have different periods: a transaction record may need to be kept longer than a general enquiry, while a family referral should be deleted or anonymised when it is no longer needed.

9. Security

We will use access controls, staff training, secure systems, strong authentication, encryption where appropriate, backups and incident procedures proportionate to the risk. No internet transmission is completely secure. If we become aware of a personal-data breach, we will assess it promptly and notify people or the regulator where the law requires.

10. Cookies and similar technologies

The current preview is designed to work without advertising or analytics cookies. The final site may use strictly necessary cookies for security or basic preferences. Optional analytics, marketing or embedded third-party tools should be disabled unless the organisation has a lawful basis, gives the required information and obtains consent where required. A cookie notice and settings control should be added before those tools are enabled.

11. Your rights

Subject to legal exceptions, you may have the right to ask for access to your information, correction of inaccurate information, erasure, restriction, data portability, or to object to certain processing. Where processing is based on consent, you may withdraw consent at any time; this will not affect processing that happened before withdrawal. You may also ask us not to send fundraising communications.

To exercise a right, contact info@palestianlondon.com. We may need to verify your identity and will respond within the period required by applicable law. If you are unhappy with our response, you can contact the UK Information Commissioner’s Office through its data protection complaints page.

12. Children

This campaign supports children, but the website is not intended to invite children to submit their own personal information. A parent, guardian, trusted adult or authorised partner should make a referral where appropriate. We will apply child-safeguarding and age-appropriate communication procedures before collecting or publishing information about a child.

13. Changes to this notice

We may update this notice when our purposes, partners, technology or legal obligations change. We will publish the new version and update the date above. If a change materially affects information already provided, we will give additional information or seek consent where required.

14. Contact and complaints

For privacy questions, requests or complaints, contact: